CWE-298
8 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-86231
mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation
mwiede · jsch
Medium6.3 - CVE-2024-1248
Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation
WSO2 · WSO2 API Manager
Medium4.8 - CVE-2025-67109
Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with…
Product not named
Critical10.0 - CVE-2025-67108
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.
Product not named
Critical10.0 - CVE-2025-61736
iSTAR- Improper Validation of Certificate Expiration
Johnson Controls · iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE
High7.1 - CVE-2025-59036
Infrahub allows authentication with deleted and expired API tokens
opsmill · infrahub
Medium5.5 - CVE-2025-4384
Certificate validity not properly verified
arcinfo · PcVue
Medium6.0 - CVE-2023-42446
Pow Mnesia cache doesn't invalidate all expired keys on startup
pow-auth · pow
Medium6.5